World-class instructors teaching today's, critical cyber skills - SANS Online Training

State of Wisconsin FOR572 - Live Online

Virtual, US Central | Mon, Oct 4 - Sat, Oct 9, 2021

This course is part of the SANS Partnership Program. Students affiliated with an eligible institution* may enroll in this course at a discounted rate of $2810. To receive this rate, enter the appropriate discount code when registering. All registrations using a code will be audited to confirm that they are eligible to receive the discounted rate.

This class is ONLINE, please click on the blue "Register Now" button to the right. If you are affiliated with a Partnership-eligible institution enter discount code 70110-OL to receive your Partnership pricing!

*Eligible institutions include US and Canada-based educational Institutions (any accredited educational institution, including colleges, universities, technical training institutes and K-12 schools) and any US state or local government agency.

Welcome to FOR572

Welcome to FOR572

Whether you handle an intrusion incident, data theft case, employee misuse scenario, or are engaged in proactive adversary discovery, the network often provides an unparalleled view of the incident.

SANS FOR572 covers the tools, technology, and processes required to integrate network evidence sources into your investigations to provide better findings, and to get the job done faster.

 

Take your system-based forensic knowledge onto the wire. Incorporate network evidence into your investigations, provide better findings, and get the job done faster.

It is exceedingly rare to work any forensic investigation that doesn't have a network component. Endpoint forensics will always be a critical and foundational skill for this career but overlooking their network communications is akin to ignoring security camera footage of a crime as it was committed. Whether you handle an intrusion incident, data theft case, employee misuse scenario, or are engaged in proactive adversary discovery, the network often provides an unparalleled view of the incident. Its evidence can provide the proof necessary to show intent, uncover attackers that have been active for months or longer, or may even prove useful in definitively proving a crime actually occurred.